Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220311 2.6 注意 eXtplorer - eXtplorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5951 2014-03-27 10:19 2013-09-27 Show GitHub Exploit DB Packet Storm
220312 1.9 注意 Mozilla Foundation - Android 上で稼動する Mozilla Firefox における Firefox プロファイルディレクトリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-1515 2014-03-26 18:24 2014-03-25 Show GitHub Exploit DB Packet Storm
220313 4.3 警告 OpenSolution - Open Solution Quick.Cms および Quick.Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6430 2014-03-26 15:56 2012-12-19 Show GitHub Exploit DB Packet Storm
220314 4 警告 Moodle - Moodle の mod/assign/externallib.php における評価のメタデータを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2572 2014-03-26 12:33 2014-03-24 Show GitHub Exploit DB Packet Storm
220315 3.5 注意 Moodle - Moodle の mod/quiz/editlib.php の quiz_question_tostring 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2571 2014-03-26 12:32 2014-03-24 Show GitHub Exploit DB Packet Storm
220316 4 警告 Moodle - Moodle の badges/mybadges.php における任意のバッジの可視性を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0129 2014-03-26 12:32 2014-03-17 Show GitHub Exploit DB Packet Storm
220317 4.9 警告 Moodle - Moodle の mod/feedback/complete.php および mod/feedback/complete_guest.php における Feedback アクティビティ起動時の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0127 2014-03-26 12:32 2014-03-17 Show GitHub Exploit DB Packet Storm
220318 6.8 警告 Moodle - Moodle の enrol/imsenterprise/importnow.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0126 2014-03-26 12:31 2014-03-17 Show GitHub Exploit DB Packet Storm
220319 5.8 警告 Moodle - Moodle の repository/alfresco/lib.php における Alfresco Repository ファイルの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0125 2014-03-26 12:31 2014-03-17 Show GitHub Exploit DB Packet Storm
220320 4 警告 Moodle - Moodle の mod/forum/renderer.php および mod/quiz/override_form.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0124 2014-03-26 12:30 2014-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345921 - props props Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables. NVD-CWE-Other
CVE-2004-1980 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345922 - businessobjects crystal_enterprise
crystal_reports
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are … NVD-CWE-Other
CVE-2004-1981 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345923 - the_pax_team
gentoo
pax_linux
linux
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infi… NVD-CWE-Other
CVE-2004-1983 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345924 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (… NVD-CWE-Other
CVE-2004-1984 2017-07-11 10:31 2004-05-2 Show GitHub Exploit DB Packet Storm
345925 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter. NVD-CWE-Other
CVE-2004-1985 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345926 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in … NVD-CWE-Other
CVE-2004-1986 2017-07-11 10:31 2004-04-4 Show GitHub Exploit DB Packet Storm
345927 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG[… NVD-CWE-Other
CVE-2004-1987 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345928 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a … NVD-CWE-Other
CVE-2004-1988 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345929 - coppermine
francisco_burzi
coppermine_photo_gallery
php-nuke
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL o… NVD-CWE-Other
CVE-2004-1989 2017-07-11 10:31 2004-04-30 Show GitHub Exploit DB Packet Storm
345930 - aldo_vargas aldos_web_server Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a mal… NVD-CWE-Other
CVE-2004-1990 2017-07-11 10:31 2004-03-3 Show GitHub Exploit DB Packet Storm